URSA trojan is back with a new dance
The Latin American URSA trojan returns in 2022 with a new dance.
Categoria: Malware
Mars Stealer malware analysis
Mars Stealer malware analysis
Brazilian trojan impacting Portuguese users and using the same capabilities seen in other Latin American threats
Introduction A new variant of a Brazilian trojan has impacted Internet end users in Portugal since last month (February 2022). Although there are no…
The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years
The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years.
Threat Report Portugal: Q4 2021
Threat Report Portugal Q4 2021: Phishing and malware by numbers.
NetWire malware analysis
NetWire is a remote access Trojan focused on password stealing and keylogging, as well as including remote control capabilities. This threat has been used by…
MalLocker Android ransomware analysis
Malware is persistent presence in our life. In the past few months, several pieces of different malware families were identified as affecting mobile devices. This…
Threat Report Portugal: Q3 2021
Threat Report Portugal Q3 2021: Phishing and malware by numbers.
Troystealer malware analysis
We are living in an era where malware is part of our daily lives. Emergent campaigns are increasing, each more sophisticated and harder to detect…
Malware analysis: Details on LockBit ransomware
Introduction LockBit is a data encryption malware in operation since September 2019 and a recent Ransomware-as-a-Service (RaaS), in which developers are in charge of the payment site…
Ransomware deletion methods and the canary in the coal mine
Introduction Ransomware is an emergent threat. Every week, there is a new and notable outbreak of this class of data encryption malware. From Ragnar Locker to Netwalker, the threats…
The new maxtrilha trojan is being disseminated and targeting several banks
A new banking trojan dubbed maxtrilha (due to its encryption key) has been discovered in the last few days and targeting customers of European and…
Netwalker ransomware full analysis
Netwalker is a data encryption malware that represents an evolution of the well-known Kokoklock ransomware and has been active since September 2019. This article will detail the specific technical features of the Netwalker ransomware. We will analyze what Netwalker is, how it works, and how you can avoid falling victim to this threat.
Ragnar Locker – Malware analysis
Ragnar Locker is ransomware that affects devices running Microsoft Windows operating systems. It was initially observed towards the end of December 2019 as part of a series of attacks against compromised networks.
Secrets behind the Lazarus’s VHD ransomware
Data encryption malware is one of the most popular malware families in recent years and targets mass volumes of users and companies around the world. In this article, we will take a deep dive into a new VHD ransomware distributed in the wild by the Lazarus group — the criminals behind the WannaCry incident in 2017.
The clandestine Horus Eyes RAT: From the underground to criminals’ arsenal
The clandestine Horus Eyes RAT: From the underground to criminals’ arsenal.